Kris
94444ced96
新增 Microsoft Teams 渠道扩展，支持在 Yuxi 平台中集成 Microsoft Teams 协作平台。 包含以下功能模块： - sdk: Bot Framework SDK 封装 - config: 渠道配置管理 - gateway: SSE/WebSocket 网关接入 - webhook: Webhook 事件处理 - outbound: 外发消息管理 - streaming: 流式消息处理 - pairing: 用户配对与绑定 - security: 安全校验 - auth: JWT 认证 - jwks: JWKS 密钥管理 - dedupe: 消息去重 - monitor: 渠道状态监控 - status: 会话状态管理 - session: 会话管理 - state: 状态管理 - runtime: 运行时管理 - actions: 动作处理 - adaptive_card: 自适应卡片 - task_modules: 任务模块 - message_extension: 消息扩展 - proactive: Proactive Messaging - graph: Microsoft Graph API 集成 - graph_teams: Teams 操作 - graph_members: 成员管理 - graph_messages: 消息获取 - graph_thread: 线程管理 - graph_users: 用户管理 - graph_upload: 文件上传 - files: 文件处理 - file_consent: 文件授权 - conversations: 会话存储 - mentions: @提及处理 - threading: 线程管理 - reactions: 表情反应 - polls: 投票功能 - meetings: 会议集成 - feedback: 反馈处理 - sso: 单点登录 - deep_links: 深层链接 - incoming_webhook: 入站 Webhook - localization: 本地化 - user_agent: 用户代理 - sent_message_cache: 消息缓存 - types: 类型定义
108 lines
3.5 KiB
Python
108 lines
3.5 KiB
Python
from __future__ import annotations
|
|
|
|
import logging
|
|
from dataclasses import dataclass, field
|
|
|
|
import httpx
|
|
import jwt
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
GRAPH_BASE_URL = "https://graph.microsoft.com/v1.0"
|
|
GRAPH_TOKEN_URL = "https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/token"
|
|
GRAPH_DEFAULT_SCOPE = "https://graph.microsoft.com/.default"
|
|
|
|
|
|
@dataclass
|
|
class ProbeGraphResult:
|
|
ok: bool
|
|
error: str | None = None
|
|
roles: list[str] = field(default_factory=list)
|
|
scopes: list[str] = field(default_factory=list)
|
|
|
|
|
|
@dataclass
|
|
class ProbeMSTeamsResult:
|
|
ok: bool
|
|
error: str | None = None
|
|
app_id: str | None = None
|
|
bot_token_ok: bool = False
|
|
graph: ProbeGraphResult | None = None
|
|
|
|
|
|
async def probe_bot_token(app_id: str, app_password: str) -> bool:
|
|
token_url = "https://login.microsoftonline.com/botframework.com/oauth2/v2.0/token"
|
|
try:
|
|
async with httpx.AsyncClient(timeout=15.0) as client:
|
|
resp = await client.post(
|
|
token_url,
|
|
data={
|
|
"grant_type": "client_credentials",
|
|
"client_id": app_id,
|
|
"client_secret": app_password,
|
|
"scope": "https://api.botframework.com/.default",
|
|
},
|
|
)
|
|
resp.raise_for_status()
|
|
return "access_token" in resp.json()
|
|
except Exception as e:
|
|
logger.debug("Bot token probe failed: %s", e)
|
|
return False
|
|
|
|
|
|
async def probe_graph_token(tenant_id: str, app_id: str, app_password: str) -> ProbeGraphResult:
|
|
token_url = GRAPH_TOKEN_URL.format(tenant_id=tenant_id)
|
|
try:
|
|
async with httpx.AsyncClient(timeout=15.0) as client:
|
|
resp = await client.post(
|
|
token_url,
|
|
data={
|
|
"grant_type": "client_credentials",
|
|
"client_id": app_id,
|
|
"client_secret": app_password,
|
|
"scope": GRAPH_DEFAULT_SCOPE,
|
|
},
|
|
)
|
|
resp.raise_for_status()
|
|
data = resp.json()
|
|
access_token = data.get("access_token", "")
|
|
|
|
if not access_token:
|
|
return ProbeGraphResult(ok=False, error="No access_token in response")
|
|
|
|
try:
|
|
unverified = jwt.decode(access_token, options={"verify_signature": False})
|
|
roles = unverified.get("roles", []) or []
|
|
scopes_str = unverified.get("scp", "") or ""
|
|
scopes = scopes_str.split(" ") if scopes_str else []
|
|
return ProbeGraphResult(ok=True, roles=list(roles), scopes=list(scopes))
|
|
except Exception as e:
|
|
return ProbeGraphResult(ok=True, error=f"Token decode warning: {e}")
|
|
except Exception as e:
|
|
return ProbeGraphResult(ok=False, error=str(e))
|
|
|
|
|
|
async def probe_msteams(app_id: str, app_password: str, tenant_id: str) -> ProbeMSTeamsResult:
|
|
bot_ok = await probe_bot_token(app_id, app_password)
|
|
if not bot_ok:
|
|
return ProbeMSTeamsResult(
|
|
ok=False,
|
|
error="Bot token probe failed",
|
|
app_id=app_id,
|
|
bot_token_ok=False,
|
|
)
|
|
|
|
graph = None
|
|
if tenant_id:
|
|
graph = await probe_graph_token(tenant_id, app_id, app_password)
|
|
if not graph.ok:
|
|
logger.warning("Graph API probe failed: %s", graph.error)
|
|
|
|
all_ok = bot_ok and (graph is None or graph.ok)
|
|
return ProbeMSTeamsResult(
|
|
ok=all_ok,
|
|
app_id=app_id,
|
|
bot_token_ok=bot_ok,
|
|
graph=graph,
|
|
)
|